more auth doc tweaks
add metadata call, not enabled yet
working on metadata request